Rocksolid Light

Welcome to RetroBBS

mail  files  register  newsreader  groups  login

Message-ID:  

Outside of a dog, a book is man's best friend. Inside of a dog, it is too dark to read.

computers / alt.usenet.offline-reader.forte-agent / Creating a kill or watch filter for an IP address

SubjectAuthor
* Creating a kill or watch filter for an IP addressDonald
`* Re: Creating a kill or watch filter for an IP addressRalph Fox
 `- Re: Creating a kill or watch filter for an IP addressDonald

1
Creating a kill or watch filter for an IP address

<1mv18ipie0vk0f2fkdh14ms7itvadam830@4ax.com>

  copy mid

https://www.rocksolidbbs.com/computers/article-flat.php?id=5043&group=alt.usenet.offline-reader.forte-agent#5043

  copy link   Newsgroups: alt.usenet.offline-reader.forte-agent
Path: i2pn2.org!i2pn.org!weretis.net!feeder6.news.weretis.net!panix!usenet.blueworldhosting.com!diablo1.usenet.blueworldhosting.com!peer02.iad!feed-me.highwinds-media.com!news.highwinds-media.com!fx33.iad.POSTED!not-for-mail
From: t2000kw@nospam.net.invalid (Donald)
Newsgroups: alt.usenet.offline-reader.forte-agent
Subject: Creating a kill or watch filter for an IP address
Message-ID: <1mv18ipie0vk0f2fkdh14ms7itvadam830@4ax.com>
User-Agent: ForteAgent/8.00.32.1272
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Lines: 14
X-Complaints-To: abuse@easynews.com
Organization: Forte - www.forteinc.com
X-Complaints-Info: Please be sure to forward a copy of ALL headers otherwise we will be unable to process your complaint properly.
Date: Wed, 07 Jun 2023 18:05:44 -0400
X-Received-Bytes: 1210
 by: Donald - Wed, 7 Jun 2023 22:05 UTC

I have Agent 8. I am getting spam from one particular range of IP addresses. Is
there a way to set up an email filter for an IP address range with the last 3
digits as a wildcard? Like: 45.46.47.???

If so, can someone help me out?

Thanks!!!

----------------------------------------------------
Some ham radio groups you may be interested in:
https://groups.io/g/ICOM https://groups.io/g/Ham-Antennas
https://groups.io/g/HamRadioHelp https://groups.io/g/Baofeng
https://groups.io/g/CHIRP https://rf-amplifiers.groups.io/g/main

Re: Creating a kill or watch filter for an IP address

<61o28itl400a9j3aq950n3rlptopigrepj@4ax.com>

  copy mid

https://www.rocksolidbbs.com/computers/article-flat.php?id=5044&group=alt.usenet.offline-reader.forte-agent#5044

  copy link   Newsgroups: alt.usenet.offline-reader.forte-agent
Path: i2pn2.org!i2pn.org!usenet.blueworldhosting.com!diablo1.usenet.blueworldhosting.com!peer03.iad!feed-me.highwinds-media.com!news.highwinds-media.com!fx02.iad.POSTED!not-for-mail
From: -rf-nz-@-.invalid (Ralph Fox)
Newsgroups: alt.usenet.offline-reader.forte-agent
Subject: Re: Creating a kill or watch filter for an IP address
Message-ID: <61o28itl400a9j3aq950n3rlptopigrepj@4ax.com>
References: <1mv18ipie0vk0f2fkdh14ms7itvadam830@4ax.com>
User-Agent: ForteAgent/8.00.32.1272
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
X-Face: 5gSW~"1=jGDo(BXfTrgL2BnC3tUB_\d0u@mP~wA1fvK`z8I[>1jXVVZ!N6ittQ.K<5!i3l> ==jcyAk.[B>kLg8TY{+8%edZ(le:ncPt%s8Pr?]QXNXO]0RC#V_zt|%>=bt>rZ2iCI^-yl7Be(]Ep> OfyI!3Bf|e
Lines: 54
X-Complaints-To: abuse@easynews.com
Organization: Forte - www.forteinc.com
X-Complaints-Info: Please be sure to forward a copy of ALL headers otherwise we will be unable to process your complaint properly.
Date: Thu, 08 Jun 2023 18:05:27 +1200
X-Received-Bytes: 2756
 by: Ralph Fox - Thu, 8 Jun 2023 06:05 UTC

On Wed, 07 Jun 2023 18:05:44 -0400, Donald wrote:

> I have Agent 8. I am getting spam from one particular range of IP addresses. Is
> there a way to set up an email filter for an IP address range with the last 3
> digits as a wildcard? Like: 45.46.47.???
>
> If so, can someone help me out?
>
> Thanks!!!

Start by trying this filter out for size:

received: {\[45\.46\.47\.([0-9]+)\]}

Whether this filter will actually work for you depends on how email
headers such as 'Received' are populated by your email provider (and
by any other mail servers between the spammer and you).

To create this spam filter I have had to assume several things about
your spam messages, because I cannot tell enough from your post.

ASSUMPTION #1
The IP address appears in a 'Received' header, not in any other
email header.

Some of my emails from 14 years ago did have a header like this:
X-Originating-IP: [100.64.127.13]
But no recent emails do.
YMMV for your account which receives this spam.

ASSUMPTION #2
In the 'Received' headers, the real sending IP address is inside
square brackets.

This is true for 2 out of 3 of my email accounts (only).
YMMV for your account which receives this spam.

For example, if a 'Received' header looks like this
Received: from 246.168.49.13 (mta.bulletproofhosting.xxx [100.64.127.13]) by 10.20.30.40 ...
then I expect 100.64.127.13 is the real sending IP address,
246.168.49.13 is a fake IP address provided by the sender,
and 10.20.30.40 is the IP address of the receiving mail server
at your email provider.

ASSUMPTION #3
The IP address which you are trying to block is the real IP
address, not a fake one provided by the sender/spammer.

--
Kind regards
Ralph
🦊

Re: Creating a kill or watch filter for an IP address

<4uc1ail5st9niuqinr29k7rp93f8vtdkt9@4ax.com>

  copy mid

https://www.rocksolidbbs.com/computers/article-flat.php?id=5096&group=alt.usenet.offline-reader.forte-agent#5096

  copy link   Newsgroups: alt.usenet.offline-reader.forte-agent
Path: i2pn2.org!i2pn.org!weretis.net!feeder8.news.weretis.net!newsreader4.netcologne.de!news.netcologne.de!peer01.ams1!peer.ams1.xlned.com!news.xlned.com!peer01.iad!feed-me.highwinds-media.com!news.highwinds-media.com!fx13.iad.POSTED!not-for-mail
From: t2000kw@nospam.net.invalid (Donald)
Newsgroups: alt.usenet.offline-reader.forte-agent
Subject: Re: Creating a kill or watch filter for an IP address
Message-ID: <4uc1ail5st9niuqinr29k7rp93f8vtdkt9@4ax.com>
References: <1mv18ipie0vk0f2fkdh14ms7itvadam830@4ax.com> <61o28itl400a9j3aq950n3rlptopigrepj@4ax.com>
User-Agent: ForteAgent/8.00.32.1272
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Lines: 20
X-Complaints-To: abuse@easynews.com
Organization: Forte - www.forteinc.com
X-Complaints-Info: Please be sure to forward a copy of ALL headers otherwise we will be unable to process your complaint properly.
Date: Sat, 01 Jul 2023 19:16:57 -0400
X-Received-Bytes: 1464
 by: Donald - Sat, 1 Jul 2023 23:16 UTC

Ralph,

Thanks. I'll wrap my head around this tomorrow. I appreciate it.

Donald

On Thu, 08 Jun 2023 18:05:27 +1200, Ralph Fox <-rf-nz-@-.invalid> wrote:

>
>To create this spam filter I have had to assume several things about
>your spam messages, because I cannot tell enough from your post.

----------------------------------------------------
Some ham radio groups you may be interested in:
https://groups.io/g/ICOM https://groups.io/g/Ham-Antennas
https://groups.io/g/HamRadioHelp https://groups.io/g/Baofeng
https://groups.io/g/CHIRP https://rf-amplifiers.groups.io/g/main

1
server_pubkey.txt

rocksolid light 0.9.8
clearnet tor